Amazon Technologies, Inc.

Waylon Brunette

Jason Curtis Jenks

Hanson Char

Brandon B Low

Jesper Mikael Johansson

Peter Sven Vosshall

Tushaar Sethi

Spencer Proffit

Jason Cetina

Disclosed is secure decryption and business rule validation of encrypted confidential data within a hardware security module (HSM). The validation may include the use of a Bloom filter stored and executing within the HSM. The return order of encrypted data within the HSM as well as requests for external data relating to validation may be randomized to further harden against correlation attacks.

Secure validation using hardware security modules

A method of using a hardware security module and an adjunct application programming interface to harden tokenization security and encryption key rotation is disclosed. In various embodiments, the method comprises receiving encrypted data at a processor of a computer system, decrypting the encrypted data to cleartext in the processor, and issuing a unique token associated with the data.

Hardening tokenization security and key rotation

Growing community of inventors

Seattle, WA, United States of America

Waylon Brunette